CVE-2018-16226

MEDIO 6.1CVE-2018-16226 · Published 23/10/2018 · updated 17/06/2026

In breve

CVE-2018-16226 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda mivoice office 400 (mitel).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.1%, superiore al 66.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
mivoice office 400 mitel	`= r5.0`	No fix yet

Description

A vulnerability in the web admin component of Mitel MiVoice Office 400, versions R5.0 HF3 (v8839a1) and earlier, could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack, due to insufficient validation for the start.asp page. A successful exploit could allow the attacker to execute arbitrary scripts to access sensitive browser-based information.

References

mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0008 · Vendor Advisory

Altre vulnerabilità di mivoice office 400

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free